$ rpki-client -vvvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: JAl/aB6DS3hBxHMmyQTkcN2ONIUo4TYXYo3O/zM1tzw= Subject key identifier: 4E:6D:53:5F:95:C3:70:27:57:9A:05:A8:6B:31:17:9C:92:3A:A2:AA Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 2CA229D46D281E2D2BF265A0E35CCB997D8F1116 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: FE Signing time: Mon 09 Nov 2026 06:44:03 +0000 Manifest this update: Mon 09 Nov 2026 06:39:03 +0000 Manifest next update: Tue 10 Nov 2026 09:28:03 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 2: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: iIzcl6r0kI/5dUacDXEctk9cTxhMSjz0vu1wAHGHow8=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a2:29:d4:6d:28:1e:2d:2b:f2:65:a0:e3:5c:cb:99:7d:8f:11:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Nov 9 06:39:03 2026 GMT Not After : Nov 10 09:28:03 2026 GMT Subject: CN=4E6D535F95C37027579A05A86B31179C923AA2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:04:cd:2c:82:a0:94:de:89:8a:0d:aa:62: f3:b3:48:f1:e4:16:90:31:80:a9:a4:dc:63:fb:e1: ad:72:e7:ea:49:95:bc:47:f2:04:f9:f6:fe:3f:c2: e4:95:b7:98:ab:4b:4e:34:77:9f:1a:71:00:54:36: 34:c2:77:dc:71:06:1f:db:66:f0:1f:4b:a0:e2:07: f1:70:f4:e3:c9:b8:26:b9:13:6c:3e:b7:9f:cb:e7: 7e:93:5d:a3:2f:77:bd:82:e2:df:60:78:59:4b:bf: 69:80:fb:de:d7:ed:db:dc:4d:59:49:99:c3:06:ff: 85:20:4b:75:4d:d9:13:5f:54:62:41:4b:9a:cb:87: d3:26:4f:03:1c:7c:fb:ac:40:67:7c:fd:dc:f9:b5: d8:57:6b:70:33:9d:2c:10:5f:25:67:58:ed:ea:e3: a4:49:a2:e2:fe:a6:e1:84:f6:4e:f1:76:20:e4:0d: fd:b0:ac:2f:c8:23:5d:16:a4:10:6c:8f:31:74:d1: eb:32:8c:93:49:4a:aa:57:58:5a:2d:5e:27:ba:50: fb:4d:86:55:e5:cf:03:31:43:5e:11:7f:0e:98:6b: c6:fe:33:9a:b5:bc:7c:f0:50:80:5f:98:47:5f:e5: e7:47:a9:a2:5c:ba:32:12:04:46:3a:d5:a8:83:fd: 16:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6D:53:5F:95:C3:70:27:57:9A:05:A8:6B:31:17:9C:92:3A:A2:AA X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:15:f5:f7:c0:86:d7:16:a5:3e:28:30:11:16:a7:49:a0:80: 81:a8:d0:70:39:9d:5f:1e:6a:68:3f:29:0b:ff:c7:ea:55:3d: f8:72:7f:ca:fd:c5:09:cc:a3:39:97:dc:33:f3:ef:a7:3f:e2: 31:3b:32:44:bb:78:75:ca:86:97:bb:d2:04:fd:39:22:36:b1: f9:2c:bf:59:30:6f:4a:60:d5:f2:aa:f4:dc:77:bb:70:58:6d: 9b:4d:3c:d6:6f:c5:51:d1:e6:a2:10:2a:ca:f2:e8:ff:5a:6a: 08:1c:07:df:fd:c0:fc:2f:98:d1:23:5a:6f:e2:df:7b:27:dd: 8f:69:8f:39:7f:5c:3d:bf:09:95:0d:c8:26:d9:d7:38:59:ef: 81:32:6a:84:8d:f7:24:60:89:2f:cf:4c:3e:a8:71:5d:b1:cb: 17:1e:07:c5:c2:be:19:d1:99:ac:ef:69:50:17:cc:79:1a:08: a0:00:04:25:17:ba:2e:01:3a:f2:0a:11:4c:69:d3:dd:40:67: 05:92:97:70:3f:25:04:18:b1:a6:17:fc:f2:7f:09:73:74:7e: 8b:17:af:66:41:32:9a:3b:8a:13:f4:72:6f:27:c4:e9:43:ec: e0:c2:27:c8:18:d4:10:55:1a:73:72:bf:7c:64:60:0a:ac:3c: 7d:f7:60:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKIp1G0oHi0r8mWg41zLmX2PERYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjExMDkwNjM5MDNaFw0yNjExMTAwOTI4MDNaMDMxMTAvBgNV BAMTKDRFNkQ1MzVGOTVDMzcwMjc1NzlBMDVBODZCMzExNzlDOTIzQUEyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9QTNLIKglN6Jig2qYvOzSPHk FpAxgKmk3GP74a1y5+pJlbxH8gT59v4/wuSVt5irS040d58acQBUNjTCd9xxBh/b ZvAfS6DiB/Fw9OPJuCa5E2w+t5/L536TXaMvd72C4t9geFlLv2mA+97X7dvcTVlJ mcMG/4UgS3VN2RNfVGJBS5rLh9MmTwMcfPusQGd8/dz5tdhXa3AznSwQXyVnWO3q 46RJouL+puGE9k7xdiDkDf2wrC/II10WpBBsjzF00esyjJNJSqpXWFotXie6UPtN hlXlzwMxQ14Rfw6Ya8b+M5q1vHzwUIBfmEdf5edHqaJcujISBEY61aiD/RbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTm1TX5XDcCdXmgWoazEXnJI6oqowHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8V9ffAhtcWpT4oMBEWp0mggIGo0HA5nV8e amg/KQv/x+pVPfhyf8r9xQnMozmX3DPz76c/4jE7MkS7eHXKhpe70gT9OSI2sfks v1kwb0pg1fKq9Nx3u3BYbZtNPNZvxVHR5qIQKsry6P9aaggcB9/9wPwvmNEjWm/i 33sn3Y9pjzl/XD2/CZUNyCbZ1zhZ74EyaoSN9yRgiS/PTD6ocV2xyxceB8XCvhnR mazvaVAXzHkaCKAABCUXui4BOvIKEUxp091AZwWSl3A/JQQYsaYX/PJ/CXN0fosX r2ZBMpo7ihP0cm8nxOlD7ODCJ8gY1BBVGnNyv3xkYAqsPH33YGg= -----END CERTIFICATE-----Generated at Mon Nov 9 22:54:00 2026 by rpki-client